# — . Approved For Release 2006/11/16 : CIA-RDP83-00156R000200070030-6 


a DCI Security Committee 


Minimum Standards For 
Security Awareness Programs 
In The U.S. Intelligence Community 


SECOM-D-543 
July 1979 


: 2 Approved For Release 2006/1 1/16 : CIA-RDP83-00156R000200070030-6 


Minimum Standards For Security Awareness Programs 
In The U.S. Intelligence Community 


Minimum standards are hereby established for the 
security education programs designed to enhance the 
security awareness of U.S. Government employees and 
private contractors working in the U.S. Intelligence 
Community. Compliance with these standards is re- 
quired for all Departments/ Agencies within the Intel- 
ligence Community. It is intended that existing securi- 
ty awareness programs shall be modified to conform 
with these standards. Departments/Agencies will es- 
tablish a documented program, to ensure that training 
has been presented to all personnel. 


The security awareness requirements set forth here- 
in are divided into three phases. Phase I concerns the 
initial indoctrination of the employee which is normal- 
ly administered prior to access to classified informa- 
tion. Phase II concerns the continuing security aware- 
ness program required to maintain and increase 
security awareness throughout the period of access. 
Phase III sets forth the final guidelines and instructions 
when access to classified information is terminated. 


I. Initial Indoctrination—As soon as practicable 
after being approved for access to classified informa- 
tion, employees shall receive an initial security indoc- 
trination which shall include: 


A. The need for and purpose of classified 
information, and the adverse effects -to the national 


security that could result from unauthorized 
disclosure. 
B. The __ intelligence mission of the 


Department/Agency to include the reasons why intel- 
ligence information is sensitive. 


C. The administrative, personnel, physical and 
other procedural security requirements of the 
Department/ Agency, and those requirements peculiar 
to specific duty assignments. 


D. Individual classification management re- 
sponsibilities as set forth in appropriate directives and 
regulations to include classification /declassification 
guidelines and marking requirements. 


E. The definitions and criminal penalities for 
espionage, including harboring or concealing persons; 
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gathering, transmitting, or losing defense information; 
gathering or delivering defense information to aid 
foreign governments; photographing and sketching 
defense installations; unauthorized disclosure of classi- 
fied information (Title 18, U.S.C., Sections 792 
through 795, 797 and 798), the Internal Security Act of 
1950 (Title 50, U.S.C., Section 783) and, when appro- 
priate, the Atomic Energy Act, Sections 224 through 
227. 


F. The administrative sanctions for violation or 
disregard of security procedures. 


G. A review of the techniques employed by 
foreign intelligence organizations in attempting to 
obtain national security information. 


H. Individual 
cluding: 


security responsibilities in- 


1. The prohibition against discussing classi- 
fied information in a nonsecure area, Over a nonsecure 
telephone or in any other manner that permits access 
by unauthorized persons. 


2. The need to determine, prior to dissemi- 
nating classified information, that the prospective 
recipient has the proper security clearance, that the - 
classified information is needed in order to perform 
official duties and that the recipient can properly 
protect the information. 


3. Administrative reporting requirements 
such as foreign travel, contacts with foreign nationals, 
attempts by unauthorized individuals to obtain nation- 
al security information, physical security deficiencies 
and loss or possible compromise of classified material. 


4. Obligation to report to proper authorities 
any information which could reflect on the trustwor- 
thiness of an individual who has access to classified 
information, such as: 

a. Willful violation of security regulations 
excessive 


b. Unexplained affluence or 


indebtedness 


ce. Serious unlawful acts 
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d. Apparent mental or emotional 


problems 
e. Coercion or harassment attempts 
f. Blackmail attempts 


5. Identification of the elements in the 
Department/Agency to which matters of security 
interest are to be referred. 


II. Periodic Employee Awareness Enhance- 
ment—Each Department/Agency shall establish a 
continuing security awareness program which will 
provide for frequent exposure of personnel to viable 
security awareness material. Implementation of a con- 
tinuing program may include live briefings, audio- 
visual presentations (e.g., video tapes, films and slide/ 
tape programs), printed material (e.g., posters, memo- 
randa, pamphlets, fliers) or a combination thereof. It is 
essential that current information and materials are 
utilized. Programs should be designed to meet the 
individual needs of the Department/Agency. 


A. The basic elements for this program shall 
include, but are not limited to, the following: 


1. The foreign intelligence threat. 
2. The technical threat. 


3. Administrative, personnel, physical and 
procedural security. 


4. Individual classification management 
responsibility. 
5. Criminal penalties and administrative 


sanctions. 
6. Individual security responsibilities. 


7. A review of other appropriate De- 
partment/ Agency requirements. 


B. Special security briefings/debriefings are 
required to supplement the existing security awareness 
programs in the following situations: 


1. When an employee is designated as a 
courier. 


2. When an employee travels, officially or 
unofficially, to or through communist countries, or 
areas of high risk. 


3. When an employee has, or anticipates, 
contact with representatives of communist controlled 
countries. 


4. When an employee is granted access to 
sensitive compartmented information or crytographic 
material. 


5. When any other situation arises for which 
a special briefing/debriefing is required by the 
Department/ Agency. 


Ill. Debriefing—When a Department / Agency 
has determined that access to classified information is 
no longer required, final instructions and guidelines 
will be provided to the employee. As a minimum these 
shall include: 


A. A requirement that the individual read 
appropriate section of Titles 18 and 50, U.S. Code and 
that the intent and criminal sanctions of these laws 
relative to espionage and unauthorized disclosure be 


clarified. 


B. The continuing obligation never to divulge, 
publish, or reveal by writing, word, conduct or other- 
wise, to any unauthorized persons any classified infor- 
mation relating to the national security, without the 
written consent of appropriate Department/Agency 


officials. 


C. An acknowledgement that the individual 
will report without delay to the Federal Bureau of 
Investigation, or the Department/Agency, any at- 
tempt by an unauthorized person to solicit national 
security information. 


D. A declaration that the individual no longer 
possesses any documents or material containing classi- 
fied information. 


E. A reminder of the risks associated with 
foreign travel and certain hazardous activities as de- 
fined in DCID 1/20, and Department/ Agency report- 
ing requirements as applicable. 


